CVE-2026-88284

GeoVision GV-LPC2211 V1.13 is vulnerable due to inadequate handling of repeated User elements in ONVIF SetUser requests, which can be exploited by an authenticated administrator to overwrite stack control state, potentially leading to a crash of the ONVIF worker. Organizations using this product should prioritize addressing this vulnerability to prevent potential service disruptions and maintain system integrity.